Bitcoin News
By Sakamoto Nashi
1 / 15
The Firmware Flaw Behind the Losses. The root cause is a firmware bug in Coldcard devices.
2 / 15
A Narrow Window to Fight Back. Thorn laid out one potential lifeline for users who still control their keys: broadcast a…
3 / 15
No Response from the Manufacturer. Coldcard's manufacturer hasn't commented on the vulnerability or the ongoing thefts.
4 / 15
A second wave of coordinated Bitcoin thefts is tearing through Coldcard hardware wallet users. Galaxy research head Alex Thorn went public on social media Monday, saying 448.
5 / 15
Thorn tracked hundreds of transactions hitting 709 potential victim addresses. The sweep rate is running at an average of 13.
6 / 15
"These are LIKELY Coldcard victims," Thorn said, flagging the transaction patterns as characteristic of wallets compromised by the underlying flaw.
7 / 15
The root cause is a firmware bug in Coldcard devices. The flaw causes wallets to generate seeds with insufficient entropy — meaning the randomness baked into key generation isn't…
8 / 15
The numbers are brutal. Over $90 million in Bitcoin has reportedly been stolen since the vulnerability came to light. Thousands of wallets are believed to be compromised. The 448.
9 / 15
Thorn laid out one potential lifeline for users who still control their keys: broadcast a conflicting transaction with a higher fee before the attacker's transaction confirms.
10 / 15
Read also: Canadian Entrepreneur Loses $1.6M in Bitcoin as Coldcard Seed Flaw Hits 4,585 Wallets
11 / 15
But it's a narrow window. Once the attacker's transaction confirms on-chain, it's done. The Bitcoin is gone.
12 / 15
Thorn also noted that similar transactions are sitting unconfirmed in the mempool right now, which means more victims are likely still in the danger zone — and some of them…
13 / 15
The mechanics of the attack make it especially hard to fight at scale. Because the stolen Bitcoin fans out to unique destination addresses rather than pooling in one wallet,…
14 / 15
Hardware wallets are supposed to be the gold standard for Bitcoin custody. The whole pitch is air-gapped security, physical key storage, protection from remote exploits.
15 / 15
Coldcard's manufacturer hasn't commented on the vulnerability or the ongoing thefts. No patch timeline. No public advisory.
The Currency Analytics
Want the full story?